Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa
File: FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa (raw, json)
Hash identifier: qfDxcFq2nhIRONRYreU1JYZ6iv5WYCmTLK7iYYoio4Q=
Subject key identifier: 14:2E:E6:E3:34:24:22:8F:96:1B:C8:94:24:F0:3B:41:D5:30:73:64
Certificate issuer: /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial: 0194266B92E696105A4D29049D05EE94E8B7
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51083
IP address blocks: 91.216.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:92:e6:96:10:5a:4d:29:04:9d:05:ee:94:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=142ee6e33424228f961bc89424f03b41d5307364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:27:0e:14:7a:06:a9:bf:c1:4d:7e:60:4f:
3d:0a:68:c6:c6:d8:dc:e4:92:f2:20:54:0a:f9:f4:
d7:7d:69:84:cd:21:93:cb:11:25:ad:07:f5:57:db:
a0:77:f7:fe:7f:a4:fe:a4:8c:48:d8:30:52:cb:ce:
b0:4c:b0:f3:45:e8:ec:31:4f:d4:20:20:4a:17:d7:
5b:c9:64:c0:43:b8:c1:e6:ac:dc:0b:0a:f5:a5:9f:
94:1c:bb:c5:7e:51:71:2f:a3:d4:e1:7e:04:86:09:
9e:0b:53:36:b5:c6:66:01:7f:c2:84:6f:f5:9a:80:
da:c5:ab:a1:f9:b7:f2:15:7d:71:32:72:0d:9c:59:
7b:67:1e:93:4f:af:f9:0f:19:55:ac:7e:0c:5d:7f:
a0:a7:2d:58:e1:53:1f:49:74:2d:4f:08:52:df:8f:
41:22:5b:d9:a1:80:72:72:d6:86:ea:fa:3a:09:dc:
d5:78:58:c6:c3:4f:09:7c:2e:2f:fe:29:b5:e0:dc:
ca:f0:fc:85:8b:a3:ad:d2:4c:37:19:e8:ad:ca:bd:
6a:96:71:47:ea:ca:5c:ed:d9:97:f2:86:c4:9d:80:
85:f8:6b:59:53:9e:12:71:42:6a:f1:e6:d4:6d:3b:
57:ac:ea:39:fa:38:82:d7:66:3d:d9:22:b6:9e:c8:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:E6:E3:34:24:22:8F:96:1B:C8:94:24:F0:3B:41:D5:30:73:64
X509v3 Authority Key Identifier:
keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/FC7m4zQkIo-WG8iUJPA7QdUwc2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:42:38:32:7f:76:d3:bf:06:f1:26:51:74:6e:15:e2:34:48:
7d:c1:99:fc:52:4d:82:88:c2:47:14:cf:20:d1:cd:9c:f1:2a:
ef:eb:cf:1d:1b:b8:68:6d:11:e0:8d:61:92:fd:88:15:36:93:
bb:8d:ed:03:4e:08:c7:57:db:fc:72:7f:4d:b4:1d:f0:e4:17:
26:03:d2:94:fa:df:ea:de:1e:2b:7d:99:4e:0e:28:15:80:fe:
4b:72:74:26:f0:f9:d7:df:bd:12:7e:59:6a:50:c5:8e:4b:bc:
8a:22:63:d5:bc:7e:58:d5:48:cc:88:b8:f5:75:85:84:3a:d8:
51:2c:8c:8b:dc:5e:bf:ce:18:76:bd:36:44:6f:ae:3a:7d:93:
c7:5b:49:e1:ee:89:5f:8d:4f:98:56:cf:29:28:51:a8:1e:42:
09:33:c5:69:fb:0f:44:65:b3:e0:de:aa:c7:1c:7f:9a:6a:c6:
59:cc:99:11:04:e4:86:62:97:c1:cc:21:d8:ca:85:7d:57:a2:
a2:f1:3d:e2:04:dc:4a:06:a6:7e:bc:54:f0:b2:b0:90:c8:5c:
87:74:2c:90:8e:eb:7c:5d:5e:ed:64:f9:d1:15:5d:b2:97:04:
8b:d3:1d:9d:8b:90:06:82:ea:cc:9d:05:e6:ad:12:c6:4f:63:
ca:aa:a0:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma5LmlhBaTSkEnQXulOi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjE1YmZjNDg4NzZjMzY1MTgzNTZlZmQ2ZTI4MDI1NWEx
ZGVlM2MwHhcNMjUwMTAyMDk0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDJlZTZlMzM0MjQyMjhmOTYxYmM4OTQyNGYwM2I0MWQ1MzA3MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJQnDhR6Bqm/wU1+YE89CmjGxtjc
5JLyIFQK+fTXfWmEzSGTyxElrQf1V9ugd/f+f6T+pIxI2DBSy86wTLDzRejsMU/U
ICBKF9dbyWTAQ7jB5qzcCwr1pZ+UHLvFflFxL6PU4X4EhgmeC1M2tcZmAX/ChG/1
moDaxauh+bfyFX1xMnINnFl7Zx6TT6/5DxlVrH4MXX+gpy1Y4VMfSXQtTwhS349B
IlvZoYByctaG6vo6CdzVeFjGw08JfC4v/im14NzK8PyFi6Ot0kw3Geityr1qlnFH
6spc7dmX8obEnYCF+GtZU54ScUJq8ebUbTtXrOo5+jiC12Y92SK2nsgtHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQu5uM0JCKPlhvIlCTwO0HVMHNkMB8GA1UdIwQY
MBaAFNEhW/xIh2w2UYNW79bigCVaHe48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQt
MDliZjQwNzFhZWEyLzEvRkM3bTR6UWtJby1XRzhpVUpQQTdRZFV3YzJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kMGM0NWMtMmE4ZC00YzNiLTgwOWQtMDliZjQwNzFhZWEy
LzEvMFNGYl9FaUhiRFpSZzFidjF1S0FKVm9kN2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9huMA0G
CSqGSIb3DQEBCwUAA4IBAQCbQjgyf3bTvwbxJlF0bhXiNEh9wZn8Uk2CiMJHFM8g
0c2c8Srv688dG7hobRHgjWGS/YgVNpO7je0DTgjHV9v8cn9NtB3w5BcmA9KU+t/q
3h4rfZlODigVgP5LcnQm8PnX370SfllqUMWOS7yKImPVvH5Y1UjMiLj1dYWEOthR
LIyL3F6/zhh2vTZEb646fZPHW0nh7olfjU+YVs8pKFGoHkIJM8Vp+w9EZbPg3qrH
HH+aasZZzJkRBOSGYpfBzCHYyoV9V6Ki8T3iBNxKBqZ+vFTwsrCQyFyHdCyQjut8
XV7tZPnRFV2ylwSL0x2di5AGgurMnQXmrRLGT2PKqqDT
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net